pfSense

updown script can be used to implement this feature
see https://wiki.strongswan.org/issues/3604
and https://wiki.strongswan.org/projects/strongswan/wiki/Updown

If we do add that, it should be optional (perhaps both global and a per-P2 checkbox) and default to off. That will be very noisy, likely generating two notifications per hour per P2 as they renegotiate, depending on the tunnel type and settings.

Yes Jim, optional always good, but then alerts about gateway state changes could be optional as well :). I mean that pfsense already have such places. Now I more use zabbix to monitor pfsense then native notifications. Still for people with more simple setup it can be useful.